ssh config: add HashKnownHosts

2015-08-30 17:11:04 +03:00 · 2015-08-30 17:11:04 +03:00 · a87af2c43c
parent 898b30cccc
commit a87af2c43c
1 changed files with 5 additions and 0 deletions
--- a/.mikaela/ssh/config
+++ b/.mikaela/ssh/config
@ -2,6 +2,11 @@
 # access, but they should require SSH key authentication anyway.

 Host *
+    # Ensure KnownHosts are unreadable if leaked.
+    # While you might be reading this file from GitHub, I haven't
+    # specified all hosts here.
+    HashKnownHosts yes
+    
    # Verify SSHFP records. In case DNSSEC is used this skips the
    # question on whether you trust the fingerprint or not.
    VerifyHostKeyDNS=yes